CVE-2021-22950CWE-352

CVE-2021-22950: vulnerability in https://github.com/concrete5/concrete5

Published · Updated

Follow this CVE+ Monitor https://github.com/concrete5/concrete5

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team"
Affected products
n/a · https://github.com/concrete5/concrete5